Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/vX-J58MYv_b-5_9--x4neZfTEf4.roa
File: vX-J58MYv_b-5_9--x4neZfTEf4.roa (raw, json)
Hash identifier: 9aibnLngimNCvM5pElLjwImzQyz081FLGIdkza9UKZA=
Subject key identifier: BD:7F:89:E7:C3:18:BF:F6:FE:E7:FF:7E:FB:1E:27:79:97:D3:11:FE
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 01874FD15FC711AD66C521B50320F1D8E845
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/vX-J58MYv_b-5_9--x4neZfTEf4.roa
Signing time: Wed 05 Apr 2023 05:08:54 +0000
ROA not before: Wed 05 Apr 2023 05:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211995
IP address blocks: 93.114.130.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
2a10:d880::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 05 Apr 2023 13:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:d1:5f:c7:11:ad:66:c5:21:b5:03:20:f1:d8:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Apr 5 05:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd7f89e7c318bff6fee7ff7efb1e277997d311fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:46:1b:b6:54:91:25:f5:0c:4c:01:88:57:
0a:96:ee:c9:37:b1:84:f3:1b:49:fc:1d:15:3b:e5:
89:6d:55:ed:8e:9f:66:2a:89:de:58:aa:06:5e:35:
43:de:c2:e7:ce:e4:2c:f5:73:76:e2:c4:af:6f:86:
3a:16:2a:b8:f1:28:0c:bd:74:29:34:b2:76:b2:ed:
b7:0c:6d:17:0f:87:d9:af:0f:2b:a5:b0:75:61:4a:
cc:8d:f5:52:2d:2d:03:7c:07:67:03:e6:87:98:ed:
13:b5:cc:5c:76:b0:11:f6:ed:a5:5f:55:aa:5b:6f:
b3:d3:2b:ee:90:e2:ff:09:c2:d8:39:29:c2:41:d0:
b9:c5:e0:46:a3:77:68:c5:70:03:af:7a:36:18:14:
17:f1:15:74:9e:26:1c:f1:47:14:e7:49:96:bb:60:
f2:d7:ff:cd:e1:95:d9:3b:e3:0d:89:f4:4a:02:14:
7f:83:36:58:f8:bf:04:97:23:1b:76:9f:7f:01:f8:
6b:4d:c7:54:26:53:ce:b9:e0:cb:ad:bd:fa:0c:65:
fd:00:8e:ac:25:c6:31:cc:f1:51:f1:00:4e:19:4b:
b2:36:88:83:43:ab:b6:5e:6d:ed:ba:b3:a7:76:eb:
fc:ef:37:ec:0b:1a:91:e1:1a:23:ec:4f:d3:cf:4c:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7F:89:E7:C3:18:BF:F6:FE:E7:FF:7E:FB:1E:27:79:97:D3:11:FE
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/vX-J58MYv_b-5_9--x4neZfTEf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.130.0/24
185.136.207.0/24
IPv6:
2a10:d880::/29
Signature Algorithm: sha256WithRSAEncryption
cb:e0:cc:24:a7:14:68:19:b0:8a:8d:3c:e8:76:a3:1c:fa:9f:
5e:b8:f1:19:7f:a5:64:a3:49:04:74:d5:29:30:2e:2d:f3:0d:
e1:d4:8a:72:1b:55:14:28:23:3d:d0:36:78:8c:c1:5b:3e:40:
c3:bd:17:fc:39:c7:b8:f0:f8:0c:4d:5c:4b:11:58:dd:6d:9d:
11:c5:e5:aa:b2:2e:ff:e8:05:bd:39:39:4f:3b:e0:c7:b3:c5:
c4:61:c1:81:69:a4:9c:85:47:c1:b8:15:be:f3:e9:10:15:a4:
47:28:48:72:51:f2:d3:73:ed:68:32:01:d2:b5:6f:78:27:5f:
f3:68:58:8f:25:fc:65:b2:d1:e5:b2:bb:90:38:83:3e:85:71:
b3:f0:d3:cb:fb:0a:39:35:da:f1:b7:7e:0d:74:41:43:3b:01:
c4:4a:b9:37:be:0f:a7:7a:00:ab:c3:c2:09:e4:ed:04:21:5d:
83:4a:81:8e:13:6d:da:9b:f1:1c:24:56:35:ba:a0:9f:89:37:
c1:f6:cb:c7:0a:b6:0e:cf:3a:ea:8e:71:c5:9e:54:c3:f7:07:
e9:35:44:97:34:b1:88:fb:10:70:5f:ca:79:18:56:58:c9:f3:
b5:39:59:28:f8:1d:f1:73:19:89:b8:fa:ad:96:ca:f4:5c:b5:
8b:16:ed:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:12 2024 by rpki-client on console-ams.rpki-client.org